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Their access to only the minimum Linux functions necessary to perform a 
limited number of tasks: log in, pass-through, scp file transfer or public key 
deployment 
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Allows used to acquire ticket (based on public key technology) to transfer 
files for a limited period of time 
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Access is even more restricted than for SFE since users are not even 
permitted to log into Secure Unattended Proxy component 
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• Ports can be closed since they are no longer needed 
Prototypes show that this is relatively easy to do 
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Security analyst views only processed and prioritized alerts 
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enclave without going through these components, indicating a problem 
with network security configuration. 


